last executing test programs: 35.904665874s ago: executing program 2 (id=1243): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0xf, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) 33.767333833s ago: executing program 2 (id=1261): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000004) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 31.21212705s ago: executing program 2 (id=1268): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 28.436861917s ago: executing program 2 (id=1283): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x10, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000029c0)=""/4099, 0x1003}, {&(0x7f00000003c0)=""/192, 0xc0}, {0x0}], 0x3}, 0x1005}], 0x1, 0x10002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 27.129245712s ago: executing program 2 (id=1291): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 25.658417893s ago: executing program 2 (id=1294): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsopen(0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r5 = add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173f03002d3589e67197f90be6e412f9f6a31868fe98e943cfed21dcad7ff0fbcb566a093db793000052dd8d39aff8c21ed56ad59300000000001c00", 0x80000000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) r6 = getegid() r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r7, 0x5453, 0x0) keyctl$chown(0x4, r5, 0xee01, r6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='personality\x00') r8 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000001280)={0x0, [[0x7fff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f3], [0x2, 0x3, 0x5, 0x4, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x8000, 0x20001]], '\x00', [{0x0, 0xffff0000}, {0x0, 0xfffffffe}, {0x5, 0xffff}, {0x0, 0x3}, {0x1000}, {0x0, 0x1000}, {0x200000}, {0x7}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0xe}], '\x00', 0x1, 0x0, 0x0, 0x2}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x102) creat(&(0x7f0000000000)='./file0\x00', 0x6a) 9.545756323s ago: executing program 32 (id=1294): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsopen(0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r5 = add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173f03002d3589e67197f90be6e412f9f6a31868fe98e943cfed21dcad7ff0fbcb566a093db793000052dd8d39aff8c21ed56ad59300000000001c00", 0x80000000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) r6 = getegid() r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r7, 0x5453, 0x0) keyctl$chown(0x4, r5, 0xee01, r6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='personality\x00') r8 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000001280)={0x0, [[0x7fff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f3], [0x2, 0x3, 0x5, 0x4, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x8000, 0x20001]], '\x00', [{0x0, 0xffff0000}, {0x0, 0xfffffffe}, {0x5, 0xffff}, {0x0, 0x3}, {0x1000}, {0x0, 0x1000}, {0x200000}, {0x7}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0xe}], '\x00', 0x1, 0x0, 0x0, 0x2}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x102) creat(&(0x7f0000000000)='./file0\x00', 0x6a) 3.564844044s ago: executing program 1 (id=1389): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c00ca3e896e96"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) 3.405038288s ago: executing program 0 (id=1391): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x200, 0x6c, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf, 0x4]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1414, 0x1, 0x0, 0x2, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x6}]}, 0x18}}, 0x4010010) 3.308504097s ago: executing program 1 (id=1392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x15a, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id']) 2.36960699s ago: executing program 0 (id=1393): socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket$kcm(0xa, 0x2, 0x88) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000000)=0x5) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) 2.225821243s ago: executing program 1 (id=1394): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x2, 0x1, 0x0, 0xf773, "00206500201b1409000000c70f00000000120000ffffffefee4b800100"}) 2.213234654s ago: executing program 0 (id=1395): socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='zonefs\x00', 0x208000, 0x0) 2.02874616s ago: executing program 1 (id=1396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r2, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000001b80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000002140)=""/144, 0x90}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f000000a000)=[{&(0x7f0000009cc0)=""/118, 0x76}, {&(0x7f0000009d40)=""/50, 0x32}, {&(0x7f0000009d80)=""/227, 0xe3}, {&(0x7f0000009e80)=""/89, 0x59}, {0x0}], 0x5}, 0x9}], 0x4, 0x40010040, &(0x7f000000a940)={0x0, 0x989680}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) 2.02831102s ago: executing program 0 (id=1397): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RELDISP(r0, 0x5605) 2.025100331s ago: executing program 3 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x10, 0x21, 0x70bd29, 0x0, {0x3}}, 0x14}}, 0x0) 1.780463832s ago: executing program 0 (id=1399): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) 1.724826687s ago: executing program 3 (id=1400): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d820000005200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.495326078s ago: executing program 0 (id=1401): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.150469468s ago: executing program 3 (id=1402): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @empty, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) 1.052536227s ago: executing program 3 (id=1403): socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket$kcm(0xa, 0x2, 0x88) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000000)=0x5) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) 997.306481ms ago: executing program 1 (id=1404): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000300)='\x00\x00', 0x2, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) 962.883355ms ago: executing program 3 (id=1405): recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)=""/238, 0xee}], 0x1}, 0x7f}], 0x1, 0x2, 0x0) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 828.817966ms ago: executing program 3 (id=1406): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 0s ago: executing program 1 (id=1407): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000500)={0x5, 0x4, 0x7, 0x8001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x4, 0x1, 0x9}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xb, 0x30}, 0xc) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) kernel console output (not intermixed with test programs): result -19 [ 99.803413][ T968] usb 2-1: USB disconnect, device number 4 [ 104.508738][ T6163] loop3: detected capacity change from 0 to 256 [ 104.656409][ T27] audit: type=1326 audit(1767561115.497:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.97" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0b178f749 code=0x0 [ 105.574990][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.902318][ T28] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.915541][ T28] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.929409][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.939986][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 106.475592][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 106.489405][ T28] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.499018][ T28] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.509036][ T28] usb 1-1: Product: syz [ 106.513384][ T28] usb 1-1: Manufacturer: syz [ 106.561364][ T28] cdc_wdm 1-1:1.0: skipping garbage [ 106.584653][ T28] cdc_wdm 1-1:1.0: skipping garbage [ 106.604849][ T28] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 106.610784][ T28] cdc_wdm 1-1:1.0: Unknown control protocol [ 107.933237][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.935324][ T9] usb 1-1: USB disconnect, device number 4 [ 107.939859][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.939879][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 108.711637][ T6201] loop3: detected capacity change from 0 to 256 [ 108.808370][ T27] audit: type=1326 audit(1767561119.667:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.3.110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0b178f749 code=0x0 [ 112.271807][ T6224] netlink: 108 bytes leftover after parsing attributes in process `syz.2.105'. [ 112.304879][ T6222] futex_wake_op: syz.1.117 tries to shift op by -1; fix this program [ 112.795837][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 112.984682][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.016482][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 113.037765][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 113.064648][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.078908][ T9] usb 4-1: config 0 descriptor?? [ 113.086315][ T6226] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.476209][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 114.482231][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 114.491473][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.500144][ T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 114.523752][ T9] usb 4-1: USB disconnect, device number 3 [ 114.529677][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.541187][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 114.580044][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 114.606794][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.635246][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.643279][ T8] usb 3-1: Product: syz [ 114.654667][ T8] usb 3-1: Manufacturer: syz [ 114.679654][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 114.687772][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 114.709705][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 114.724645][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 114.929853][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 114.936510][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 114.942946][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 114.949574][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 114.955972][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 114.962626][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 114.968930][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 114.975542][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 114.981864][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 114.988491][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 114.994924][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.001557][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.007911][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.014525][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.020901][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.027524][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.035709][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.042330][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.049067][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.055674][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.073570][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 115.082354][ T8] usb 3-1: USB disconnect, device number 3 [ 115.218151][ T6243] loop3: detected capacity change from 0 to 256 [ 115.294011][ T27] audit: type=1326 audit(1767561126.147:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0b178f749 code=0x0 [ 117.058344][ T6256] block nbd0: shutting down sockets [ 119.201438][ T27] audit: type=1326 audit(1767561130.057:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.1.137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe461d8f749 code=0x0 [ 119.304902][ T28] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.138968][ T28] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.174673][ T28] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.198335][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.253023][ T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 120.278242][ T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 120.293763][ T28] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.316188][ T28] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.555050][ T28] usb 4-1: Product: syz [ 121.559262][ T28] usb 4-1: Manufacturer: syz [ 121.585610][ T28] cdc_wdm 4-1:1.0: skipping garbage [ 121.590854][ T28] cdc_wdm 4-1:1.0: skipping garbage [ 121.617893][ T28] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 121.634726][ T28] cdc_wdm 4-1:1.0: Unknown control protocol [ 121.865083][ C1] wdm_int_callback: 62 callbacks suppressed [ 121.865104][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 121.877724][ C1] wdm_int_callback: 62 callbacks suppressed [ 121.877743][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 121.890475][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 121.897107][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 121.903542][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 121.910168][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 121.916523][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 121.923136][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 121.929475][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 121.936094][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 121.942410][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 121.949028][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 121.964705][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 121.971352][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 121.977651][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 121.984271][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 121.993949][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 122.000576][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 122.006967][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 122.013584][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 122.033909][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 122.060334][ T28] usb 4-1: USB disconnect, device number 4 [ 125.077447][ T27] audit: type=1326 audit(1767561135.927:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f492a98f749 code=0x0 [ 126.089378][ T6335] capability: warning: `syz.1.154' uses deprecated v2 capabilities in a way that may be insecure [ 128.293856][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.511378][ T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.552331][ T23] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.582109][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.602966][ T27] audit: type=1326 audit(1767561139.457:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f492a98f749 code=0x0 [ 128.643310][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 128.657006][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 128.671871][ T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.683278][ T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.693050][ T23] usb 3-1: Product: syz [ 128.698568][ T23] usb 3-1: Manufacturer: syz [ 128.718577][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 128.731729][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 128.745645][ T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 128.751712][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 128.954693][ C1] wdm_int_callback: 63 callbacks suppressed [ 128.954717][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 128.967220][ C1] wdm_int_callback: 63 callbacks suppressed [ 128.967233][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 128.984831][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 128.991463][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 129.000896][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 129.007501][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 129.013907][ T23] usb 3-1: USB disconnect, device number 4 [ 129.019852][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 129.019873][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 129.019887][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 130.586639][ T6375] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 130.601043][ T6375] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/file1 [ 130.605673][ T6377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.132844][ T27] audit: type=1326 audit(1767561142.987:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b178f749 code=0x7ffc0000 [ 132.210589][ T6393] loop3: detected capacity change from 0 to 256 [ 132.230111][ T27] audit: type=1326 audit(1767561143.017:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b178f749 code=0x7ffc0000 [ 132.291821][ T27] audit: type=1326 audit(1767561143.017:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fc0b178f749 code=0x7ffc0000 [ 132.340836][ T27] audit: type=1326 audit(1767561143.017:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b178f749 code=0x7ffc0000 [ 132.365417][ T27] audit: type=1326 audit(1767561143.017:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b178f749 code=0x7ffc0000 [ 132.388611][ T27] audit: type=1326 audit(1767561143.137:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.3.175" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0b178f749 code=0x0 [ 133.315626][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.321948][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.855009][ T28] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.166150][ T28] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.189690][ T28] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.294522][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.334780][ T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 134.359913][ T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 134.392633][ T28] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.411965][ T28] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.432903][ T28] usb 4-1: Product: syz [ 134.446846][ T28] usb 4-1: Manufacturer: syz [ 134.530366][ T28] cdc_wdm 4-1:1.0: skipping garbage [ 134.547470][ T28] cdc_wdm 4-1:1.0: skipping garbage [ 134.571046][ T28] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 134.585814][ T6414] random: crng reseeded on system resumption [ 134.603318][ T28] cdc_wdm 4-1:1.0: Unknown control protocol [ 134.845154][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.851803][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.862142][ T6417] wg2: entered promiscuous mode [ 134.864841][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.872594][ T6417] wg2: entered allmulticast mode [ 134.873581][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.886150][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.892771][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.902453][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.909075][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.916467][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.923083][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.930121][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.936745][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.943381][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.950075][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.956629][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.963240][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.969553][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.976169][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.982498][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.989133][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.996840][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 135.005620][ T9] usb 4-1: USB disconnect, device number 5 [ 137.621750][ T6439] loop3: detected capacity change from 0 to 256 [ 137.753099][ T27] audit: type=1326 audit(1767561148.607:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0b178f749 code=0x0 [ 138.726715][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 138.770249][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 139.584721][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.038151][ T8] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.146699][ T8] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 140.320506][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.382379][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 140.424045][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 140.483669][ T8] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.516001][ T6478] loop2: detected capacity change from 0 to 256 [ 140.552717][ T8] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.571634][ T8] usb 1-1: Product: syz [ 140.584747][ T8] usb 1-1: Manufacturer: syz [ 140.590359][ T27] audit: type=1326 audit(1767561151.428:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.2.200" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f280bb8f749 code=0x0 [ 140.637704][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 140.665875][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 140.693153][ T8] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 140.720768][ T8] cdc_wdm 1-1:1.0: Unknown control protocol [ 140.888201][ C1] wdm_int_callback: 3 callbacks suppressed [ 140.888216][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 140.900600][ C1] wdm_int_callback: 3 callbacks suppressed [ 140.900611][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 140.915944][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 140.922543][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 140.928834][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 140.935430][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 140.941693][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 140.948292][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 140.954580][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 140.961165][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 140.969761][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 140.976384][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 140.982829][ T5851] usb 1-1: USB disconnect, device number 5 [ 140.990490][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 140.997105][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 141.003191][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 141.921267][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.206'. [ 143.300282][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.497425][ T6513] loop1: detected capacity change from 0 to 256 [ 143.518216][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 143.527831][ T27] audit: type=1326 audit(1767561154.187:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.1.213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe461d8f749 code=0x0 [ 143.557305][ T8] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 143.565418][ T8] usb 1-1: config 0 has no interface number 0 [ 143.623883][ T8] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.642361][ T8] usb 1-1: config 0 interface 85 has no altsetting 0 [ 143.668310][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 143.685022][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.693051][ T8] usb 1-1: Product: syz [ 143.706245][ T8] usb 1-1: Manufacturer: syz [ 143.727922][ T8] usb 1-1: SerialNumber: syz [ 143.745682][ T8] usb 1-1: config 0 descriptor?? [ 144.443281][ T8] appletouch 1-1:0.85: Geyser mode initialized. [ 144.466249][ T8] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input6 [ 144.670757][ T8] usb 1-1: USB disconnect, device number 6 [ 144.670759][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 144.736805][ T8] appletouch 1-1:0.85: input: appletouch disconnected [ 144.775515][ T5803] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.152362][ T5803] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.162164][ T5803] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 145.185154][ T5803] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.202745][ T5803] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 145.308431][ T5803] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 145.367132][ T5803] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.376459][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.419600][ T5803] usb 3-1: Product: syz [ 145.436518][ T5803] usb 3-1: Manufacturer: syz [ 145.656008][ T5803] cdc_wdm 3-1:1.0: skipping garbage [ 145.724147][ T5803] cdc_wdm 3-1:1.0: skipping garbage [ 145.812006][ T6538] process 'syz.0.223' launched '/dev/fd/3' with NULL argv: empty string added [ 145.841681][ T5803] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 145.855223][ T5803] cdc_wdm 3-1:1.0: Unknown control protocol [ 145.955372][ T5803] usb 3-1: USB disconnect, device number 5 [ 145.977815][ T6542] loop0: detected capacity change from 0 to 256 [ 146.034262][ T27] audit: type=1326 audit(1767561156.526:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f492a98f749 code=0x0 [ 146.676025][ T6554] syz.1.229[6554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.676114][ T6554] syz.1.229[6554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.001196][ T27] audit: type=1326 audit(1767561158.369:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 148.116286][ T27] audit: type=1326 audit(1767561158.369:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 148.212102][ T27] audit: type=1326 audit(1767561158.369:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.0.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 148.336804][ T6584] loop2: detected capacity change from 0 to 256 [ 148.397146][ T27] audit: type=1326 audit(1767561158.733:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.242" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f280bb8f749 code=0x0 [ 148.418639][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.570866][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.656341][ T6591] hsr0: entered promiscuous mode [ 148.734395][ T6590] hsr0: left promiscuous mode [ 148.816803][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.825444][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.929097][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.076396][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 149.105168][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 149.155025][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.256488][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.289651][ T8] usb 4-1: Product: syz [ 150.323898][ T8] usb 4-1: Manufacturer: syz [ 150.383573][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 150.430784][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 150.444823][ T6611] pim6reg: entered allmulticast mode [ 150.452439][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 150.458363][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 150.494702][ T6611] pim6reg: left allmulticast mode [ 150.715011][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 150.721665][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 150.728097][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 150.734718][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 150.741046][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 150.747664][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 150.754023][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 150.760639][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 150.766953][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 150.773552][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 150.779843][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 150.786457][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 150.792754][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 150.799335][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 150.805612][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 150.812191][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 150.826498][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 150.833088][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 150.839468][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 150.846047][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 150.863816][ T8] usb 4-1: USB disconnect, device number 6 [ 150.869729][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 151.400827][ T6622] loop1: detected capacity change from 0 to 256 [ 151.521252][ T27] audit: type=1326 audit(1767561161.652:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.1.257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe461d8f749 code=0x0 [ 153.337087][ T6644] vlan2: entered promiscuous mode [ 153.349958][ T6644] vlan2: entered allmulticast mode [ 153.413636][ T6644] hsr_slave_1: entered allmulticast mode [ 153.772350][ T6650] syz.0.268[6650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.772436][ T6650] syz.0.268[6650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.268856][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.730097][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.742876][ T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 154.760638][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.769760][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 154.781390][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 154.797043][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.806291][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.814439][ T8] usb 2-1: Product: syz [ 154.818719][ T8] usb 2-1: Manufacturer: syz [ 155.578066][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 155.589297][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 155.597400][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 155.606133][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 155.641057][ T6668] loop2: detected capacity change from 0 to 256 [ 155.690345][ T27] audit: type=1326 audit(1767561165.552:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f280bb8f749 code=0x0 [ 155.867232][ T5851] usb 2-1: USB disconnect, device number 5 [ 155.873249][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 156.547815][ T6687] ======================================================= [ 156.547815][ T6687] WARNING: The mand mount option has been deprecated and [ 156.547815][ T6687] and is ignored by this kernel. Remove the mand [ 156.547815][ T6687] option from the mount to silence this warning. [ 156.547815][ T6687] ======================================================= [ 158.516948][ T6717] loop0: detected capacity change from 0 to 256 [ 158.579273][ T27] audit: type=1326 audit(1767561168.256:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.0.288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f492a98f749 code=0x0 [ 158.769612][ T5830] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 158.965941][ T5830] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.975040][ T5830] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 158.986512][ T5830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.995825][ T5830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 159.015605][ T5830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 159.049450][ T5830] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.059046][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.071700][ T5830] usb 3-1: Product: syz [ 159.080946][ T5830] usb 3-1: Manufacturer: syz [ 159.099339][ T5830] cdc_wdm 3-1:1.0: skipping garbage [ 159.118766][ T5830] cdc_wdm 3-1:1.0: skipping garbage [ 159.145653][ T5830] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 159.168026][ T5830] cdc_wdm 3-1:1.0: Unknown control protocol [ 159.376009][ C0] wdm_int_callback: 69 callbacks suppressed [ 159.376034][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 159.388564][ C0] wdm_int_callback: 69 callbacks suppressed [ 159.388582][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 159.402199][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 159.408909][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 159.415190][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 159.421812][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 159.429276][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 159.435911][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 159.442547][ T8] usb 3-1: USB disconnect, device number 6 [ 159.448489][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 159.448512][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 159.448529][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 160.902838][ T6744] netlink: 'syz.0.297': attribute type 4 has an invalid length. [ 161.637544][ T6759] loop2: detected capacity change from 0 to 256 [ 161.680824][ T27] audit: type=1326 audit(1767561171.165:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.2.300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f280bb8f749 code=0x0 [ 163.847590][ T5830] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.023346][ T6794] loop0: detected capacity change from 0 to 256 [ 164.064808][ T5830] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.075274][ T5830] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.087606][ T5830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.102039][ T5830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 164.187575][ T27] audit: type=1326 audit(1767561173.485:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.0.316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f492a98f749 code=0x0 [ 164.211095][ T5830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 164.275736][ T5830] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.307623][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.332108][ T5830] usb 3-1: Product: syz [ 164.336366][ T5830] usb 3-1: Manufacturer: syz [ 164.374974][ T5830] cdc_wdm 3-1:1.0: skipping garbage [ 164.392963][ T5830] cdc_wdm 3-1:1.0: skipping garbage [ 164.401243][ T5830] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 164.407880][ T5830] cdc_wdm 3-1:1.0: Unknown control protocol [ 165.758005][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 165.758358][ T5830] usb 3-1: USB disconnect, device number 7 [ 165.764628][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 165.764645][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 169.342514][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.547594][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.561136][ T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 169.596370][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.615646][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 169.672462][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 169.720970][ T6867] loop3: detected capacity change from 0 to 256 [ 169.729078][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.772130][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.780285][ T8] usb 2-1: Product: syz [ 169.788436][ T8] usb 2-1: Manufacturer: syz [ 169.792365][ T27] audit: type=1326 audit(1767561178.742:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.3.331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0b178f749 code=0x0 [ 169.806631][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 169.855792][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 169.875845][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 169.898531][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 170.030926][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 170.037573][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 170.043852][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 170.050457][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 170.058021][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 170.064627][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 170.072239][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 170.078848][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 170.085332][ T23] usb 2-1: USB disconnect, device number 6 [ 170.091514][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 170.091534][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 170.091542][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 170.199030][ T6874] binder: 6873:6874 ioctl c00c620f 2000000000c0 returned -22 [ 170.393301][ T6878] .: renamed from bond_slave_0 (while UP) [ 170.542363][ T6882] tmpfs: Unknown parameter 'nolazytime' [ 171.345458][ T6910] loop0: detected capacity change from 0 to 256 [ 171.489079][ T27] audit: type=1326 audit(1767561180.332:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.356" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f492a98f749 code=0x0 [ 171.728495][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 172.039438][ T6922] ptrace attach of "./syz-executor exec"[5763] was attempted by ""[6922] [ 172.051074][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.061094][ T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.094342][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.131899][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 172.158752][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 172.176587][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.185864][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.199127][ T8] usb 3-1: Product: syz [ 172.203315][ T8] usb 3-1: Manufacturer: syz [ 172.216400][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 172.229114][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 172.251234][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 172.261102][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 172.510071][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 172.516728][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 172.523411][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 172.530041][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 172.537362][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 172.543971][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 172.550330][ T5851] usb 3-1: USB disconnect, device number 8 [ 172.753643][ T23] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 172.918635][ T6938] mmap: syz.3.367 (6938) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.982463][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.999544][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 173.019140][ T23] usb 1-1: config 4 has an invalid interface number: 179 but max is 0 [ 173.030432][ T23] usb 1-1: config 4 has no interface number 0 [ 173.069977][ T23] usb 1-1: config 4 interface 179 has no altsetting 0 [ 173.161014][ T23] usb 1-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=8d.52 [ 173.177651][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.230825][ T23] usb 1-1: Product: 訣闉挟ᷧϦ覚։౒㠪ꪶ䈊璞敼濰ᬊ궾Όᄭ“ાﳇ觀⾷塘낍皖瘁ﴕᬈᓴ޻䁯ָ阡⵶真눺㏧꜔ࣷ䞨㎆鱂觴坏짴جꗨ븬簕樄凞겧䀺쉌ꦩ闠诃岡䁘ᓺꢘꏤ澣䵔㾞諙继鬠찫폺㏎砬㯟撂ꌉ॑캑켣Ǵ璕ᘨ鰱품痎況浸馫㩣텆슱ؾ [ 173.304659][ T23] usb 1-1: Manufacturer: 䉨宍ᴕ쵰찣쵤꭯소筮缈晕濖᪂놚⣋乂⋝㶒彡鴴㸮鎔⤼뺡쏍騄敮풙⏈휕侥צּ﯆ꛒ쥠䐟鄅蠛낊㽽쉵᠟箯⤦腠㵰㝶佺䮻묵 [ 173.505476][ T23] usb 1-1: SerialNumber: ࠔ [ 173.769577][ T6946] loop2: detected capacity change from 0 to 256 [ 173.795168][ T27] audit: type=1326 audit(1767561182.498:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6943 comm="syz.2.369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f280bb8f749 code=0x0 [ 174.037098][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.372'. [ 174.875213][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.374'. [ 175.660555][ T5851] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.676215][ T23] mos7840 1-1:4.179: required endpoints missing [ 175.710410][ T23] usb 1-1: USB disconnect, device number 7 [ 175.887493][ T6976] loop1: detected capacity change from 0 to 256 [ 175.929965][ T5851] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 175.960107][ T5851] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 175.982628][ T5851] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.001898][ T5851] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 176.025674][ T5851] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 176.072979][ T5851] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.098595][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.121535][ T5851] usb 4-1: Product: syz [ 176.128912][ T5851] usb 4-1: Manufacturer: syz [ 176.137800][ T27] audit: type=1326 audit(1767561184.687:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.1.382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe461d8f749 code=0x0 [ 176.164393][ T5851] cdc_wdm 4-1:1.0: skipping garbage [ 176.169641][ T5851] cdc_wdm 4-1:1.0: skipping garbage [ 176.368030][ T5851] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 176.373977][ T5851] cdc_wdm 4-1:1.0: Unknown control protocol [ 176.396406][ T5861] usb 4-1: USB disconnect, device number 7 [ 176.904569][ T7000] netlink: 'syz.1.391': attribute type 3 has an invalid length. [ 176.913366][ T7000] netlink: 'syz.1.391': attribute type 3 has an invalid length. [ 177.332354][ T7006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.393'. [ 177.840767][ T7012] binder: 7011:7012 ioctl c0306201 2000000003c0 returned -14 [ 178.170750][ T7016] Zero length message leads to an empty skb [ 178.567851][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 178.629715][ T7038] veth1_macvtap: left promiscuous mode [ 178.642858][ T7038] macsec0: entered promiscuous mode [ 178.799574][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.814140][ T23] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 178.851177][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.869909][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 178.883277][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 178.911457][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.920561][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.928557][ T23] usb 1-1: Product: syz [ 178.932818][ T23] usb 1-1: Manufacturer: syz [ 178.952264][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 178.961171][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 178.971426][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 178.990496][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 179.225757][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 179.232411][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 179.238797][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 179.245407][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 179.253320][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 179.259939][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 179.267697][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 179.274315][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 179.284073][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 179.290696][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 179.298726][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 179.305343][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 179.312756][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 179.319376][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 179.325797][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 179.332457][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 179.338813][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 179.345433][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 179.351821][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 179.358427][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 179.365318][ T23] usb 1-1: USB disconnect, device number 8 [ 179.371177][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 179.496101][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 181.195457][ T7080] syz.0.424 uses obsolete (PF_INET,SOCK_PACKET) [ 181.293568][ T5851] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.498388][ T5851] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.526131][ T5851] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.559237][ T5851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.586301][ T5851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 181.614486][ T5851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 181.647995][ T5851] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.662096][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.687181][ T5851] usb 2-1: Product: syz [ 181.706554][ T5851] usb 2-1: Manufacturer: syz [ 181.724983][ T5851] cdc_wdm 2-1:1.0: skipping garbage [ 181.741055][ T5851] cdc_wdm 2-1:1.0: skipping garbage [ 181.755593][ T5851] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 181.768918][ T5851] cdc_wdm 2-1:1.0: Unknown control protocol [ 181.959607][ T5851] usb 2-1: USB disconnect, device number 7 [ 181.965522][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 183.020717][ T7117] serio: Serial port ptm1 [ 183.157893][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 183.270602][ T7128] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 183.280920][ T7128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.445'. [ 183.367595][ T7128] team0: Port device geneve0 added [ 183.583246][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.447'. [ 183.752733][ T5830] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 183.957509][ T5830] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.995131][ T5830] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.050325][ T5830] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.082453][ T5830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 184.106314][ T5830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 184.129001][ T5830] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.138455][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.156569][ T5830] usb 4-1: Product: syz [ 184.160855][ T5830] usb 4-1: Manufacturer: syz [ 184.168395][ T5830] cdc_wdm 4-1:1.0: skipping garbage [ 184.174990][ T5830] cdc_wdm 4-1:1.0: skipping garbage [ 184.201616][ T5830] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 184.228403][ T5830] cdc_wdm 4-1:1.0: Unknown control protocol [ 184.373602][ T7154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.419197][ T5830] usb 4-1: USB disconnect, device number 8 [ 184.425096][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 184.469381][ T7155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.991183][ T7160] netlink: 36 bytes leftover after parsing attributes in process `syz.0.455'. [ 185.398369][ T5830] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 185.619478][ T5830] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.638427][ T5830] usb 2-1: not running at top speed; connect to a high speed hub [ 185.657102][ T5830] usb 2-1: config 4 has an invalid interface number: 179 but max is 0 [ 185.686921][ T5830] usb 2-1: config 4 has no interface number 0 [ 185.697195][ T5830] usb 2-1: config 4 interface 179 has no altsetting 0 [ 185.719059][ T5830] usb 2-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=8d.52 [ 185.728132][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.740329][ T5830] usb 2-1: Product: 訣闉挟ᷧϦ覚։౒㠪ꪶ䈊璞敼濰ᬊ궾Όᄭ“ાﳇ觀⾷塘낍皖瘁ﴕᬈᓴ޻䁯ָ阡⵶真눺㏧꜔ࣷ䞨㎆鱂觴坏짴جꗨ븬簕樄凞겧䀺쉌ꦩ闠诃岡䁘ᓺꢘꏤ澣䵔㾞諙继鬠찫폺㏎砬㯟撂ꌉ॑캑켣Ǵ璕ᘨ鰱품痎況浸馫㩣텆슱ؾ [ 185.788867][ T5830] usb 2-1: Manufacturer: 䉨宍ᴕ쵰찣쵤꭯소筮缈晕濖᪂놚⣋乂⋝㶒彡鴴㸮鎔⤼뺡쏍騄敮풙⏈휕侥צּ﯆ꛒ쥠䐟鄅蠛낊㽽쉵᠟箯⤦腠㵰㝶佺䮻묵 [ 185.817044][ T5830] usb 2-1: SerialNumber: ࠔ [ 186.068418][ T5830] mos7840 2-1:4.179: required endpoints missing [ 186.089618][ T5830] usb 2-1: USB disconnect, device number 8 [ 186.460211][ T7187] input: syz1 as /devices/virtual/input/input7 [ 187.022975][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 187.109641][ T27] audit: type=1326 audit(1767561194.959:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 187.142699][ T7197] syz.2.471 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 187.163611][ T27] audit: type=1326 audit(1767561194.959:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 187.222684][ T27] audit: type=1326 audit(1767561194.977:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 187.252356][ T27] audit: type=1326 audit(1767561194.977:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 187.275547][ T27] audit: type=1326 audit(1767561194.977:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 187.306945][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.317173][ T23] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 187.328229][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.339887][ T27] audit: type=1326 audit(1767561194.987:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 187.362382][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 187.373886][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 187.388464][ T27] audit: type=1326 audit(1767561194.987:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 187.411597][ T27] audit: type=1326 audit(1767561194.987:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 187.439370][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.448954][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.458897][ T23] usb 4-1: Product: syz [ 187.463539][ T23] usb 4-1: Manufacturer: syz [ 187.468315][ T27] audit: type=1326 audit(1767561194.996:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 187.497716][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 187.503109][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 187.510182][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 187.519568][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 187.619300][ T23] Process accounting resumed [ 187.735893][ C1] wdm_int_callback: 11 callbacks suppressed [ 187.735917][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.748457][ C1] wdm_int_callback: 11 callbacks suppressed [ 187.748474][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.763115][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.769765][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.776669][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.783299][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.789937][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.796561][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.804278][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.810925][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.817670][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.824284][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.830647][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.837261][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.843519][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.850134][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.856582][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.863191][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.869731][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.876344][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.891578][ T23] usb 4-1: USB disconnect, device number 9 [ 187.897466][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 188.725511][ T7228] Illegal XDP return value 120 on prog (id 158) dev syz_tun, expect packet loss! [ 189.398243][ T5767] Bluetooth: hci1: command 0x0406 tx timeout [ 189.404351][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 189.410464][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 189.417480][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 189.518774][ T27] audit: type=1326 audit(1767561197.204:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 189.877291][ T5861] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 189.972472][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.071418][ T5861] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.093373][ T5861] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.134677][ T5861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.151108][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 190.163266][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 190.179799][ T5861] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.197637][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.208394][ T5861] usb 4-1: Product: syz [ 190.212591][ T5861] usb 4-1: Manufacturer: syz [ 190.241577][ T5861] cdc_wdm 4-1:1.0: skipping garbage [ 190.246820][ T5861] cdc_wdm 4-1:1.0: skipping garbage [ 190.273935][ T5861] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 190.279968][ T5861] cdc_wdm 4-1:1.0: Unknown control protocol [ 190.505604][ T5861] usb 4-1: USB disconnect, device number 10 [ 190.505675][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 191.445804][ T7283] syz.3.506[7283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.445929][ T7283] syz.3.506[7283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.708483][ T7292] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.303767][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.497634][ T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.507731][ T23] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 192.519145][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.531750][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 192.553643][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 192.577645][ T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.588116][ T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.617837][ T23] usb 3-1: Product: syz [ 192.632981][ T23] usb 3-1: Manufacturer: syz [ 192.661820][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 192.693396][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 192.706844][ T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 192.713461][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 192.910002][ T23] usb 3-1: USB disconnect, device number 9 [ 192.910080][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 193.447296][ T5851] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 193.652458][ T5851] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 193.661622][ T5851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.673291][ T5851] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.686983][ T5851] usb 4-1: config 1 has no interface number 1 [ 193.702135][ T5851] usb 4-1: string descriptor 0 read error: -22 [ 193.708795][ T5851] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.732153][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.786913][ T5851] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 193.801602][ T5851] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 193.816410][ T5851] usb 4-1: MIDIStreaming interface descriptor not found [ 194.002080][ T5851] usb 4-1: USB disconnect, device number 11 [ 194.997423][ T5861] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 195.046027][ T7371] kernel profiling enabled (shift: 17) [ 195.055240][ T7367] veth0_to_team: entered promiscuous mode [ 195.202439][ T5861] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.214677][ T5861] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 195.243160][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.252190][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 195.307097][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 195.343274][ T5861] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.361064][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.383722][ T5861] usb 2-1: Product: syz [ 195.387916][ T5861] usb 2-1: Manufacturer: syz [ 195.396363][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.545'. [ 195.403847][ T5861] cdc_wdm 2-1:1.0: skipping garbage [ 195.410543][ T5861] cdc_wdm 2-1:1.0: skipping garbage [ 195.439003][ T5861] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 195.444938][ T5861] cdc_wdm 2-1:1.0: Unknown control protocol [ 195.666743][ C0] wdm_int_callback: 57 callbacks suppressed [ 195.666764][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 195.679297][ C0] wdm_int_callback: 57 callbacks suppressed [ 195.679314][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 195.692114][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 195.698827][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 195.705842][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 195.712453][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 195.718879][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 195.725494][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 195.731793][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 195.738414][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 195.744739][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 195.751356][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 195.758427][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 195.765045][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 195.777038][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 195.783660][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 195.798262][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 195.804894][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 195.812672][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 195.819733][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 195.834036][ T5861] usb 2-1: USB disconnect, device number 9 [ 195.839903][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 195.884719][ T7387] Process accounting resumed [ 196.008517][ T7394] random: crng reseeded on system resumption [ 196.529308][ T7409] veth0_to_team: entered promiscuous mode [ 196.615407][ T7414] bridge0: entered allmulticast mode [ 196.708645][ T7414] block nbd0: server does not support multiple connections per device. [ 196.728938][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 196.730947][ T7414] block nbd0: shutting down sockets [ 196.807196][ T7420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.564'. [ 196.946538][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.967716][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.996067][ T8] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 197.013055][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.034058][ T8] usb 4-1: config 0 descriptor?? [ 197.466437][ T5861] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 197.515690][ T8] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 197.526820][ T8] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 197.539605][ T8] hid-steam 0003:28DE:1142.0001: item fetching failed at offset 2/5 [ 197.550016][ T8] hid-steam 0003:28DE:1142.0001: steam_probe:parse of hid interface failed [ 197.563341][ T8] hid-steam: probe of 0003:28DE:1142.0001 failed with error -22 [ 197.682683][ T5861] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.696886][ T5861] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.707325][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.727103][ T8] usb 4-1: USB disconnect, device number 12 [ 197.736713][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 197.760001][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 197.774530][ T5861] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.793384][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.802083][ T5861] usb 2-1: Product: syz [ 197.806378][ T5861] usb 2-1: Manufacturer: syz [ 197.819601][ T5861] cdc_wdm 2-1:1.0: skipping garbage [ 197.825904][ T5861] cdc_wdm 2-1:1.0: skipping garbage [ 197.833336][ T5861] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 197.839477][ T5861] cdc_wdm 2-1:1.0: Unknown control protocol [ 197.988894][ T7444] netlink: 'syz.0.574': attribute type 11 has an invalid length. [ 197.997870][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'. [ 198.050250][ T23] usb 2-1: USB disconnect, device number 10 [ 198.056390][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 198.080627][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.575'. [ 198.130178][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.136518][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.845518][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 198.845531][ T27] audit: type=1326 audit(1767561205.932:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 198.967455][ T27] audit: type=1326 audit(1767561205.951:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 199.015384][ T27] audit: type=1326 audit(1767561205.951:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 199.037718][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.076543][ T27] audit: type=1326 audit(1767561205.951:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 199.173367][ T27] audit: type=1326 audit(1767561206.082:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 199.188881][ T7484] random: crng reseeded on system resumption [ 199.262256][ T27] audit: type=1326 audit(1767561206.082:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 199.266389][ T7486] cgroup: Need name or subsystem set [ 199.330371][ T27] audit: type=1326 audit(1767561206.344:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b178f749 code=0x7ffc0000 [ 199.401134][ T27] audit: type=1326 audit(1767561206.344:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b178f749 code=0x7ffc0000 [ 199.482346][ T27] audit: type=1326 audit(1767561206.353:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc0b17c2005 code=0x7ffc0000 [ 199.547083][ T27] audit: type=1326 audit(1767561206.353:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc0b17c2005 code=0x7ffc0000 [ 200.095943][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.304206][ T7512] ptrace attach of "./syz-executor exec"[5765] was attempted by ""[7512] [ 200.323620][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.332830][ T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 200.352858][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.370096][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 200.403050][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 200.452253][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.470022][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.478163][ T8] usb 2-1: Product: syz [ 200.483022][ T8] usb 2-1: Manufacturer: syz [ 200.501003][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 200.513303][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 200.529754][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 200.536410][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 200.592110][ T7520] wg2: entered promiscuous mode [ 200.597010][ T7520] wg2: entered allmulticast mode [ 200.732904][ T28] usb 2-1: USB disconnect, device number 11 [ 200.738954][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 201.810017][ T7540] bridge0: entered allmulticast mode [ 201.936311][ T7540] block nbd0: server does not support multiple connections per device. [ 201.953594][ T7540] block nbd0: shutting down sockets [ 202.310184][ T7548] netlink: 'syz.3.621': attribute type 4 has an invalid length. [ 202.455326][ T7567] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 203.259989][ T28] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.466210][ T28] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.482243][ T28] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 203.496527][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.505606][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 203.518303][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 203.532101][ T28] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.548731][ T28] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.560878][ T28] usb 3-1: Product: syz [ 203.565230][ T28] usb 3-1: Manufacturer: syz [ 203.577382][ T28] cdc_wdm 3-1:1.0: skipping garbage [ 203.587136][ T28] cdc_wdm 3-1:1.0: skipping garbage [ 203.634694][ T28] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 203.640632][ T28] cdc_wdm 3-1:1.0: Unknown control protocol [ 203.909144][ C1] wdm_int_callback: 49 callbacks suppressed [ 203.909168][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 203.921696][ C1] wdm_int_callback: 49 callbacks suppressed [ 203.921715][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 203.933960][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.940562][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 203.947184][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 203.954847][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 203.961466][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 203.967781][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 203.974393][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 203.980675][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 203.987279][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 203.993566][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 204.000164][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 204.006474][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 204.013076][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 204.020636][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 204.027257][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 204.033644][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 204.040253][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 204.046596][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 204.053209][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 204.083361][ T23] usb 3-1: USB disconnect, device number 10 [ 204.089322][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 208.150416][ T7665] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 208.195923][ T7668] hsr0: entered promiscuous mode [ 208.321868][ T7667] hsr0: left promiscuous mode [ 208.368598][ T7674] netlink: 9 bytes leftover after parsing attributes in process `syz.1.672'. [ 208.381579][ T7672] Process accounting resumed [ 208.396940][ T7674] netlink: 9 bytes leftover after parsing attributes in process `syz.1.672'. [ 211.785017][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 211.997651][ T7750] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.153013][ T7753] block device autoloading is deprecated and will be removed. [ 212.563837][ T27] kauditd_printk_skb: 126 callbacks suppressed [ 212.563851][ T27] audit: type=1326 audit(1767561218.768:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.0.716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f492a98f749 code=0x0 [ 213.062097][ T5851] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 213.267544][ T5851] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.286471][ T5851] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.306790][ T5851] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.324426][ T5851] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 213.348755][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.367271][ T5851] usb 2-1: config 0 descriptor?? [ 213.391310][ T7791] syz_tun: entered allmulticast mode [ 213.648258][ T7801] netlink: 2 bytes leftover after parsing attributes in process `syz.0.729'. [ 213.682962][ T5851] usbhid 2-1:0.0: can't add hid device: -71 [ 213.689402][ T5851] usbhid: probe of 2-1:0.0 failed with error -71 [ 213.728632][ T5851] usb 2-1: USB disconnect, device number 12 [ 213.955694][ T27] audit: type=1326 audit(1767561220.068:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 214.000682][ T27] audit: type=1326 audit(1767561220.068:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 214.042278][ T27] audit: type=1326 audit(1767561220.068:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 214.067564][ T27] audit: type=1326 audit(1767561220.068:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 214.091423][ T27] audit: type=1326 audit(1767561220.068:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 214.114042][ T27] audit: type=1326 audit(1767561220.068:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 214.170801][ T27] audit: type=1326 audit(1767561220.068:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 214.203802][ T27] audit: type=1326 audit(1767561220.068:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 214.227245][ T27] audit: type=1326 audit(1767561220.068:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492a98f749 code=0x7ffc0000 [ 214.677834][ T7831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.525629][ T5803] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 216.751931][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 216.786610][ T5803] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 216.818806][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.847427][ T5803] usb 2-1: config 0 descriptor?? [ 216.865787][ T7877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.375936][ T5803] wacom 0003:056A:00F0.0002: hidraw0: USB HID v1.01 Device [HID 056a:00f0] on usb-dummy_hcd.1-1/input0 [ 217.552529][ T5803] usb 2-1: USB disconnect, device number 13 [ 218.542264][ T7924] hub 2-0:1.0: USB hub found [ 218.554041][ T7924] hub 2-0:1.0: 1 port detected [ 218.870636][ T7935] misc userio: No port type given on /dev/userio [ 219.295409][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 219.320586][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 219.350295][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 219.369151][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 219.661721][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 219.661734][ T27] audit: type=1326 audit(1767561225.401:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe461d8f749 code=0x7ffc0000 [ 219.746276][ T27] audit: type=1326 audit(1767561225.438:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe461d8f749 code=0x7ffc0000 [ 219.828202][ T27] audit: type=1326 audit(1767561225.438:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe461d8f749 code=0x7ffc0000 [ 220.185583][ T7985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.790299][ T28] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 221.016657][ T28] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.036125][ T28] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.068585][ T28] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.075627][ T28] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 221.130096][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.147091][ T28] usb 4-1: config 0 descriptor?? [ 221.318987][ T5803] Process accounting resumed [ 221.729225][ T28] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0003/input/input11 [ 221.782234][ T28] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 221.906400][ T28] usb 4-1: USB disconnect, device number 13 [ 222.007089][ T8036] fido_id[8036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 222.109139][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 222.788009][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 222.811860][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 222.819297][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 222.836611][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 222.853658][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 222.867491][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 222.880887][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 222.888909][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 222.897057][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 222.909149][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 222.917025][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 @   [ 224.284863][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 /dev/fusefd=0x0000000000000004,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)@s./file0/file0./file0fuse[ 225.576164][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 225.585136][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 225.593312][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 225.600938][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 225.608343][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 225.615998][ T28] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 225.629892][ T28] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 225.695596][ T8090] fido_id[8090]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.167250][ T8] page_pool_release_retry() stalled pool shutdown 32 inflight 60 sec [ 226.621474][ T8113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.858'. [ 226.647988][ T8113] netlink: 'syz.1.858': attribute type 7 has an invalid length. [ 226.680076][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 226.885459][ T8119] hugetlbfs: syz.1.862 (8119): Using mlock ulimits for SHM_HUGETLB is obsolete [ 227.969246][ T8169] Process accounting paused [ 228.167610][ T8180] netlink: 388 bytes leftover after parsing attributes in process `syz.0.890'. [ 228.613041][ T8207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.456854][ T8247] random: crng reseeded on system resumption [ 229.481585][ T8249] binder: 8241:8249 ioctl c0306201 0 returned -14 [ 230.218214][ T8] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 230.413893][ T8] usb 4-1: No LPM exit latency info found, disabling LPM. [ 230.424512][ T8] usb 4-1: config 1 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 528, setting to 8 [ 230.436106][ T8] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.449626][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 230.465029][ T8] usb 4-1: string descriptor 0 read error: -22 [ 230.471430][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.40 [ 230.480967][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.492975][ T8264] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 230.539015][ T5851] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 231.492946][ T8] usbhid 4-1:1.0: can't add hid device: -71 [ 231.499003][ T8] usbhid: probe of 4-1:1.0 failed with error -71 [ 231.520173][ T8] usb 4-1: USB disconnect, device number 14 [ 231.604470][ T5851] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 231.618659][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.638808][ T5851] usb 3-1: config 0 descriptor?? [ 231.650866][ T5851] cp210x 3-1:0.0: cp210x converter detected [ 232.086356][ T5851] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 232.141263][ T5851] usb 3-1: cp210x converter now attached to ttyUSB0 [ 232.387392][ T8] usb 3-1: USB disconnect, device number 11 [ 232.438655][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 232.483025][ T8] cp210x 3-1:0.0: device disconnected [ 233.696619][ T8320] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 233.703505][ T8320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.720214][ T8320] vhci_hcd vhci_hcd.0: Device attached [ 233.733868][ T8320] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 233.740496][ T8320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.752898][ T8320] vhci_hcd vhci_hcd.0: Device attached [ 233.761036][ T8320] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 233.767662][ T8320] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 233.780499][ T8320] vhci_hcd vhci_hcd.0: Device attached [ 233.790923][ T8320] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 233.797541][ T8320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.809813][ T8320] vhci_hcd vhci_hcd.0: Device attached [ 233.837747][ T8320] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 233.844377][ T8320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.862694][ T8320] vhci_hcd vhci_hcd.0: Device attached [ 233.894315][ T8320] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(23) [ 233.900951][ T8320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 233.937162][ T8335] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.938957][ T8320] vhci_hcd vhci_hcd.0: Device attached [ 234.001953][ T8320] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 234.020522][ T8320] vhci_hcd vhci_hcd.0: port 0 already used [ 234.026850][ T968] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 234.072617][ T8329] vhci_hcd: connection closed [ 234.072939][ T8321] vhci_hcd: connection reset by peer [ 234.073775][ T8327] vhci_hcd: connection closed [ 234.079344][ T8331] vhci_hcd: connection closed [ 234.083207][ T8323] vhci_hcd: connection closed [ 234.092691][ T8325] vhci_hcd: connection closed [ 234.122721][ T12] vhci_hcd: stop threads [ 234.153360][ T12] vhci_hcd: release socket [ 234.167625][ T12] vhci_hcd: disconnect device [ 234.281383][ T12] vhci_hcd: stop threads [ 234.285682][ T12] vhci_hcd: release socket [ 234.297545][ T12] vhci_hcd: disconnect device [ 234.307498][ T12] vhci_hcd: stop threads [ 234.311900][ T12] vhci_hcd: release socket [ 234.322704][ T12] vhci_hcd: disconnect device [ 234.340066][ T12] vhci_hcd: stop threads [ 234.530727][ T12] vhci_hcd: release socket [ 234.535372][ T12] vhci_hcd: disconnect device [ 234.540731][ T12] vhci_hcd: stop threads [ 234.546583][ T12] vhci_hcd: release socket [ 234.560506][ T12] vhci_hcd: disconnect device [ 234.572119][ T12] vhci_hcd: stop threads [ 234.585205][ T12] vhci_hcd: release socket [ 234.595395][ T12] vhci_hcd: disconnect device [ 235.377461][ T8358] fuse: Bad value for 'fd' [ 237.977006][ T8381] capability: warning: `syz.0.960' uses 32-bit capabilities (legacy support in use) [ 238.517336][ T8400] sg_write: data in/out 124/84 bytes for SCSI command 0x1c-- guessing data in; [ 238.517336][ T8400] program syz.3.973 not setting count and/or reply_len properly [ 238.545192][ T5829] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 238.591517][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 238.660224][ T8404] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 238.758912][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 238.773244][ T5829] usb 3-1: config 0 has an invalid interface number: 240 but max is 0 [ 238.812367][ T5829] usb 3-1: config 0 has no interface number 0 [ 238.831254][ T5829] usb 3-1: config 0 interface 240 altsetting 7 endpoint 0x4 has an invalid bInterval 160, changing to 7 [ 238.853920][ T5829] usb 3-1: config 0 interface 240 has no altsetting 0 [ 238.898002][ T5829] usb 3-1: New USB device found, idVendor=78c9, idProduct=823d, bcdDevice=be.d4 [ 239.703859][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.774383][ T968] vhci_hcd: vhci_device speed not set [ 239.786167][ T5829] usb 3-1: Product: syz [ 239.790362][ T5829] usb 3-1: Manufacturer: syz [ 239.808042][ T5829] usb 3-1: SerialNumber: syz [ 239.817788][ T5829] usb 3-1: config 0 descriptor?? [ 239.824433][ T5829] usb 3-1: bad CDC descriptors [ 240.048953][ T5851] usb 3-1: USB disconnect, device number 12 [ 240.689237][ T8388] Process accounting paused [ 242.560755][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 242.622124][ T8448] bond_slave_0: entered promiscuous mode [ 242.628145][ T8448] bond_slave_1: entered promiscuous mode [ 243.368088][ T8448] macvtap1: entered promiscuous mode [ 243.376968][ T8448] bond0: entered promiscuous mode [ 243.395325][ T8448] macvtap1: entered allmulticast mode [ 243.402952][ T8448] bond0: entered allmulticast mode [ 243.408957][ T8448] bond_slave_0: entered allmulticast mode [ 243.418947][ T8448] bond_slave_1: entered allmulticast mode [ 243.448568][ T8448] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 243.470614][ T8450] macvtap1: left promiscuous mode [ 243.482365][ T8450] bond0: left promiscuous mode [ 243.492007][ T8450] macvtap1: left allmulticast mode [ 243.499285][ T8450] bond0: left allmulticast mode [ 243.504282][ T8450] bond_slave_0: left allmulticast mode [ 243.513811][ T8450] bond_slave_1: left allmulticast mode [ 243.526461][ T5803] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 243.751315][ T5803] usb 3-1: Using ep0 maxpacket: 32 [ 243.759348][ T5803] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 243.771118][ T5803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.781718][ T5803] usb 3-1: config 0 has no interfaces? [ 243.787602][ T5803] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 243.796960][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.808174][ T5803] usb 3-1: config 0 descriptor?? [ 244.270784][ T5803] usb 3-1: USB disconnect, device number 13 [ 245.127610][ T8473] tipc: Started in network mode [ 245.137653][ T8473] tipc: Node identity 84e, cluster identity 4711 [ 245.145590][ T8473] tipc: Node number set to 2126 [ 246.819900][ T8497] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 247.027433][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 247.510704][ T9] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 247.629607][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 247.642469][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 41407, setting to 1023 [ 247.656905][ T9] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 247.667427][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.684380][ T9] usb 4-1: Product: syz [ 247.688580][ T9] usb 4-1: Manufacturer: syz [ 247.694313][ T9] usb 4-1: SerialNumber: syz [ 247.714217][ T9] usb 4-1: config 0 descriptor?? [ 247.728790][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 247.737907][ T9] hub: probe of 4-1:0.0 failed with error -5 [ 247.746928][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 247.980986][ T9] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 248.004805][ T9] usbtouchscreen: probe of 4-1:0.0 failed with error -22 [ 248.057098][ T9] usb 4-1: USB disconnect, device number 15 [ 248.919104][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 251.464115][ T8549] input: syz1 as /devices/virtual/input/input13 [ 252.584167][ T8566] warning: `syz.2.1031' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 255.797558][ T5829] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 256.124688][ T5829] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.136274][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.145778][ T5829] usb 2-1: Product: syz [ 256.155642][ T5829] usb 2-1: Manufacturer: syz [ 256.160355][ T5829] usb 2-1: SerialNumber: syz [ 256.177641][ T5829] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 256.236287][ T5851] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 256.688213][ T968] usb 2-1: USB disconnect, device number 14 [ 256.851866][ T5829] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 257.054872][ T5829] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 257.080315][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.088504][ T5829] usb 3-1: Product: syz [ 257.096671][ T5829] usb 3-1: Manufacturer: syz [ 257.108054][ T5829] usb 3-1: SerialNumber: syz [ 257.128114][ T5829] usb 3-1: config 0 descriptor?? [ 257.134148][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 257.139015][ T5829] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 014 [ 257.466972][ T5851] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 257.487029][ T5851] ath9k_htc: Failed to initialize the device [ 257.496063][ T968] usb 2-1: ath9k_htc: USB layer deinitialized [ 257.576587][ T5829] (null): failure reading functionality [ 257.586959][ T5829] i2c i2c-1: failure reading functionality [ 257.604879][ T5829] i2c i2c-1: connected i2c-tiny-usb device [ 258.573592][ T968] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 258.622655][ T8627] i2c i2c-1: failure reading status [ 258.836785][ T8] usb 3-1: USB disconnect, device number 14 [ 258.858944][ T968] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 258.885847][ T968] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 258.903867][ T968] usb 2-1: config 0 has no interface number 0 [ 258.910224][ T968] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.921923][ T968] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 258.935914][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.973603][ T968] usb 2-1: config 0 descriptor?? [ 259.245637][ T8] usb 2-1: USB disconnect, device number 15 [ 260.075495][ T8647] Process accounting resumed [ 260.985719][ T8675] overlayfs: failed to resolve './file1': -2 [ 261.040955][ T8675] overlayfs: failed to resolve './file1/file0': -2 [ 261.923429][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 263.727119][ T27] audit: type=1326 audit(1767561266.629:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8717 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 263.778710][ T27] audit: type=1326 audit(1767561266.629:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8717 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 263.802376][ T27] audit: type=1326 audit(1767561266.657:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8717 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 263.825387][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.831684][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.846724][ T27] audit: type=1326 audit(1767561266.657:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8717 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 263.918609][ T27] audit: type=1326 audit(1767561266.657:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8717 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 269.149372][ T8769] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.889623][ T9] IPVS: starting estimator thread 0... [ 271.008360][ T8792] IPVS: using max 20 ests per chain, 48000 per kthread [ 274.407415][ C0] sched: RT throttling activated [ 275.170627][ T968] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 276.139163][ T968] usb 4-1: Using ep0 maxpacket: 8 [ 276.404704][ T968] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 276.417116][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.425188][ T968] usb 4-1: Product: syz [ 276.449282][ T968] usb 4-1: Manufacturer: syz [ 276.453985][ T968] usb 4-1: SerialNumber: syz [ 276.480696][ T968] usb 4-1: config 0 descriptor?? [ 276.504624][ T968] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 276.663285][ T8826] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1118'. [ 276.686538][ T8826] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1118'. [ 276.701033][ T8823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1118'. [ 276.711430][ T8764] Process accounting resumed [ 277.249103][ T8838] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 277.258406][ T8838] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 277.270229][ T8838] overlayfs: missing 'lowerdir' [ 277.651241][ T968] gspca_sonixj: reg_w1 err -110 [ 277.657812][ T968] sonixj: probe of 4-1:0.0 failed with error -110 [ 279.395035][ T23] usb 4-1: USB disconnect, device number 16 [ 280.309090][ T8872] IPVS: Unknown mcast interface: nicvf0 [ 283.645352][ T5773] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 288.678003][ T5803] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 288.909038][ T5803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.966428][ T5803] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.993564][ T5803] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.009115][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 289.036193][ T5803] usb 3-1: SerialNumber: syz [ 289.471768][ T5803] usb 3-1: 0:2 : does not exist [ 290.596167][ T9] page_pool_release_retry() stalled pool shutdown 32 inflight 121 sec [ 290.641207][ T5803] usb 3-1: USB disconnect, device number 15 [ 290.728414][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.892925][ T8965] Process accounting paused [ 294.204187][ T5829] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 294.997406][ T8984] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.264597][ T5829] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 295.279961][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.776837][ T5829] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 295.796182][ T5829] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 295.807548][ T5829] usb 2-1: Manufacturer: syz [ 296.032126][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 296.220306][ T5829] usb 2-1: config 0 descriptor?? [ 297.973660][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 298.031100][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'. [ 298.255225][ T5829] rc_core: IR keymap rc-hauppauge not found [ 298.282634][ T5829] Registered IR keymap rc-empty [ 298.307588][ T5829] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 298.357682][ T5829] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 298.428404][ T5829] usb 2-1: USB disconnect, device number 16 [ 303.802032][ T9066] raw_sendmsg: syz.0.1199 forgot to set AF_INET. Fix it! [ 306.229548][ T5803] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 306.421853][ T5803] usb 3-1: Using ep0 maxpacket: 16 [ 306.434987][ T5803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.460580][ T5803] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.611042][ T5803] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.643228][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.709555][ T5803] usb 3-1: Product: syz [ 306.762929][ T5803] usb 3-1: Manufacturer: syz [ 306.807036][ T5803] usb 3-1: SerialNumber: syz [ 307.726499][ T5803] usb 3-1: 0:2 : does not exist [ 307.825401][ T5803] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 307.863377][ T5803] usb 3-1: USB disconnect, device number 16 [ 307.906490][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.176860][ T9119] Process accounting paused [ 313.271107][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 313.307874][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1229'. [ 313.352091][ T9157] netlink: 'syz.1.1229': attribute type 14 has an invalid length. [ 317.838172][ T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 318.065210][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.078688][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.087832][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.096039][ T23] usb 3-1: Product: syz [ 318.100659][ T23] usb 3-1: Manufacturer: syz [ 318.105364][ T23] usb 3-1: SerialNumber: syz [ 318.725468][ T968] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 318.975113][ T968] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.986694][ T968] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.000203][ T968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 319.007211][ T968] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 319.036149][ T23] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 319.056147][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.091131][ T23] cdc_ncm 3-1:1.0: bind() failure [ 319.124221][ T968] usb 4-1: config 0 descriptor?? [ 319.131237][ T23] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 319.142543][ T23] cdc_ncm 3-1:1.1: bind() failure [ 319.150830][ T23] usb 3-1: USB disconnect, device number 17 [ 319.543898][ T9229] syz.1.1258 (9229) used greatest stack depth: 17744 bytes left [ 319.589591][ T968] a4tech 0003:09DA:000A.0005: unknown main item tag 0x3 [ 319.632169][ T968] a4tech 0003:09DA:000A.0005: item fetching failed at offset 2/3 [ 319.675748][ T968] a4tech 0003:09DA:000A.0005: parse failed [ 319.696968][ T968] a4tech: probe of 0003:09DA:000A.0005 failed with error -22 [ 319.789925][ T968] usb 4-1: USB disconnect, device number 17 [ 322.209194][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1265'. [ 322.646596][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'. [ 322.744439][ T968] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 322.949149][ T968] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 323.005186][ T968] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.020934][ T968] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.042011][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 323.050575][ T968] usb 3-1: SerialNumber: syz [ 323.581872][ T9277] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1277'. [ 323.592082][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 323.601600][ T9277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1277'. [ 323.786735][ T968] usb 3-1: 0:2 : does not exist [ 323.801101][ T968] usb 3-1: unit 5 not found! [ 323.846913][ T968] usb 3-1: USB disconnect, device number 18 [ 323.909889][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.070728][ T27] audit: type=1326 audit(1767561323.995:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 325.190986][ T27] audit: type=1326 audit(1767561323.995:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bb8f749 code=0x7ffc0000 [ 326.104037][ T9309] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 326.449440][ T9312] Process accounting resumed [ 328.250514][ T9334] batadv_slave_1: entered promiscuous mode [ 328.898359][ T9328] batadv_slave_1: left promiscuous mode [ 329.481500][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.489294][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.221219][ T9367] sctp: [Deprecated]: syz.0.1305 (pid 9367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.221219][ T9367] Use struct sctp_sack_info instead [ 332.162952][ T9377] (null): rxe_set_mtu: Set mtu to 1024 [ 332.376657][ T9377] infiniband syz2: set active [ 332.381844][ T9377] infiniband syz2: added veth0_vlan [ 332.524768][ T9377] RDS/IB: syz2: added [ 332.550959][ T9377] smc: adding ib device syz2 with port count 1 [ 332.583689][ T9377] smc: ib device syz2 port 1 has pnetid [ 338.679206][ T9434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1332'. [ 339.990001][ T5773] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 341.248547][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 343.917241][ T5762] Process accounting resumed [ 344.256182][ T9514] bridge0: port 3(gretap0) entered blocking state [ 344.291468][ T9514] bridge0: port 3(gretap0) entered disabled state [ 344.302573][ T9514] gretap0: entered allmulticast mode [ 344.324333][ T9514] gretap0: entered promiscuous mode [ 344.343428][ T9514] bridge0: port 3(gretap0) entered blocking state [ 344.350449][ T9514] bridge0: port 3(gretap0) entered forwarding state [ 344.361099][ T9518] overlayfs: failed to clone upperpath [ 344.371514][ T9519] gretap0: left allmulticast mode [ 344.376645][ T9519] gretap0: left promiscuous mode [ 344.383580][ T9519] bridge0: port 3(gretap0) entered disabled state [ 344.568061][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.578348][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.586914][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.595355][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.611114][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.619312][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.730918][ T3522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.043040][ T3522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.156080][ T3522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.544904][ T3522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.999641][ T5773] Bluetooth: hci0: command tx timeout [ 347.108648][ T5830] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 347.184833][ T9524] chnl_net:caif_netlink_parms(): no params data found [ 347.362427][ T5830] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 347.412038][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.425239][ T5830] usb 4-1: Product: syz [ 347.456023][ T5830] usb 4-1: Manufacturer: syz [ 347.463310][ T5830] usb 4-1: SerialNumber: syz [ 347.477492][ T5830] usb 4-1: config 0 descriptor?? [ 347.489837][ T5830] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 347.518417][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.526203][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.533918][ T9524] bridge_slave_0: entered allmulticast mode [ 347.540775][ T9524] bridge_slave_0: entered promiscuous mode [ 347.549263][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.556680][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.565054][ T9524] bridge_slave_1: entered allmulticast mode [ 347.572664][ T9524] bridge_slave_1: entered promiscuous mode [ 347.643664][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.656347][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.722259][ T5830] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 348.792655][ T5830] sq905c 4-1:0.0: Get version command failed [ 348.799514][ T5830] sq905c: probe of 4-1:0.0 failed with error -110 [ 348.825274][ T5830] usb 4-1: USB disconnect, device number 18 [ 348.882473][ T9524] team0: Port device team_slave_0 added [ 348.894353][ T9524] team0: Port device team_slave_1 added [ 348.973186][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.981878][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.014143][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.086248][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.093247][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.140497][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.226716][ T5773] Bluetooth: hci0: command tx timeout [ 349.253323][ T9524] hsr_slave_0: entered promiscuous mode [ 349.262035][ T9524] hsr_slave_1: entered promiscuous mode [ 349.277217][ T9524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.295776][ T9524] Cannot create hsr debugfs directory [ 350.315408][ T9524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.669093][ T9610] netlink: 'syz.0.1391': attribute type 79 has an invalid length. [ 350.747646][ T9524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.822860][ T9524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.860483][ T9524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.446306][ T5773] Bluetooth: hci0: command tx timeout [ 351.567870][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.623882][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.689331][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.696548][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.730318][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.737495][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.853643][ T3522] hsr_slave_0: left promiscuous mode [ 351.853735][ T5773] Bluetooth: hci3: unexpected event for opcode 0x040d [ 351.878016][ T3522] hsr_slave_1: left promiscuous mode [ 351.895716][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.903236][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.939578][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.959330][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.982736][ T3522] bridge_slave_1: left allmulticast mode [ 351.994866][ T3522] bridge_slave_1: left promiscuous mode [ 352.004898][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.016871][ T3522] bridge_slave_0: left allmulticast mode [ 352.028563][ T3522] bridge_slave_0: left promiscuous mode [ 352.041258][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.122921][ T3522] veth1_macvtap: left promiscuous mode [ 352.128946][ T3522] veth0_macvtap: left promiscuous mode [ 352.164848][ T3522] veth1_vlan: left promiscuous mode [ 352.175512][ T3522] veth0_vlan: left promiscuous mode [ 352.881234][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 352.888510][ T5754] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 352.929978][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 352.976773][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.018081][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.121970][ T5754] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 353.137557][ T5754] usb 4-1: config 0 interface 0 has no altsetting 0 [ 353.147403][ T5754] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 353.159694][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 353.173473][ T5754] usb 4-1: Product: syz [ 353.179255][ T5754] usb 4-1: Manufacturer: syz [ 353.184573][ T5754] usb 4-1: SerialNumber: syz [ 353.197174][ T5754] usb 4-1: config 0 descriptor?? [ 353.217552][ T5754] usb 4-1: selecting invalid altsetting 0 [ 353.464973][ T9665] [ 353.467340][ T9665] ============================================ [ 353.473473][ T9665] WARNING: possible recursive locking detected [ 353.479704][ T9665] syzkaller #0 Not tainted [ 353.484097][ T9665] -------------------------------------------- [ 353.490225][ T9665] syz.3.1406/9665 is trying to acquire lock: [ 353.496192][ T9665] ffff88805aee8b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 353.505676][ T9665] [ 353.505676][ T9665] but task is already holding lock: [ 353.513021][ T9665] ffff88805aee8b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 353.523010][ T9665] [ 353.523010][ T9665] other info that might help us debug this: [ 353.531052][ T9665] Possible unsafe locking scenario: [ 353.531052][ T9665] [ 353.538488][ T9665] CPU0 [ 353.541753][ T9665] ---- [ 353.545013][ T9665] lock(&chip->mutex); [ 353.549240][ T9665] lock(&chip->mutex); [ 353.553379][ T9665] [ 353.553379][ T9665] *** DEADLOCK *** [ 353.553379][ T9665] [ 353.561505][ T9665] May be due to missing lock nesting notation [ 353.561505][ T9665] [ 353.569806][ T9665] 3 locks held by syz.3.1406/9665: [ 353.574896][ T9665] #0: ffff88802e64a4e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_sync+0x2a7/0xc20 [ 353.585498][ T9665] #1: ffff88802e64a238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x15a/0x1c50 [ 353.596009][ T9665] #2: ffff88805aee8b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 353.606433][ T9665] [ 353.606433][ T9665] stack backtrace: [ 353.612310][ T9665] CPU: 1 PID: 9665 Comm: syz.3.1406 Not tainted syzkaller #0 [ 353.619661][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.629707][ T9665] Call Trace: [ 353.632971][ T9665] [ 353.635892][ T9665] dump_stack_lvl+0x16c/0x230 [ 353.640566][ T9665] ? show_regs_print_info+0x20/0x20 [ 353.645759][ T9665] ? print_deadlock_bug+0x435/0x5d0 [ 353.650952][ T9665] __lock_acquire+0x5d40/0x7c80 [ 353.655829][ T9665] ? verify_lock_unused+0x140/0x140 [ 353.661021][ T9665] lock_acquire+0x197/0x410 [ 353.665509][ T9665] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 353.670960][ T9665] ? trace_contention_end+0x39/0xe0 [ 353.676150][ T9665] ? __might_sleep+0xe0/0xe0 [ 353.680724][ T9665] ? read_lock_is_recursive+0x20/0x20 [ 353.686082][ T9665] ? wait_clear_urbs+0x184/0x390 [ 353.691008][ T9665] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 353.697412][ T9665] __mutex_lock+0x129/0xcc0 [ 353.701898][ T9665] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 353.707343][ T9665] ? usb_free_coherent+0x5d/0x90 [ 353.712263][ T9665] ? release_urbs+0x3fe/0x4a0 [ 353.716929][ T9665] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 353.722377][ T9665] ? mutex_lock_nested+0x20/0x20 [ 353.727296][ T9665] ? snd_usb_endpoint_set_params+0x407/0x2b50 [ 353.733351][ T9665] snd_usb_endpoint_close+0x3c/0x4c0 [ 353.738626][ T9665] snd_usb_hw_params+0x1357/0x19c0 [ 353.743732][ T9665] ? snd_usb_pcm_close+0x300/0x300 [ 353.748923][ T9665] ? snd_pcm_lib_malloc_pages+0x270/0x690 [ 353.754658][ T9665] snd_pcm_hw_params+0x835/0x1c50 [ 353.759686][ T9665] ? snd_pcm_hw_param_first+0x6a0/0xb30 [ 353.765224][ T9665] ? snd_pcm_forward+0x6d0/0x6d0 [ 353.770160][ T9665] snd_pcm_oss_change_params_locked+0x2144/0x3d30 [ 353.776572][ T9665] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 353.781710][ T9665] ? ima_file_free+0x154/0x450 [ 353.786457][ T9665] ? mutex_lock_nested+0x20/0x20 [ 353.791382][ T9665] ? __fsnotify_parent+0x651/0x720 [ 353.796480][ T9665] snd_pcm_oss_sync+0x363/0xc20 [ 353.801319][ T9665] snd_pcm_oss_release+0x102/0x240 [ 353.806419][ T9665] ? snd_pcm_oss_open+0x1b40/0x1b40 [ 353.811604][ T9665] __fput+0x234/0x970 [ 353.815580][ T9665] task_work_run+0x1ce/0x250 [ 353.820159][ T9665] ? task_work_cancel+0x240/0x240 [ 353.825172][ T9665] ? exit_to_user_mode_loop+0x3b/0x110 [ 353.830618][ T9665] exit_to_user_mode_loop+0xe6/0x110 [ 353.835888][ T9665] exit_to_user_mode_prepare+0xf6/0x180 [ 353.841422][ T9665] syscall_exit_to_user_mode+0x1a/0x50 [ 353.846865][ T9665] do_syscall_64+0x61/0xb0 [ 353.851263][ T9665] ? clear_bhb_loop+0x40/0x90 [ 353.855929][ T9665] ? clear_bhb_loop+0x40/0x90 [ 353.860599][ T9665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.866480][ T9665] RIP: 0033:0x7fc0b178f749 [ 353.870893][ T9665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.890575][ T9665] RSP: 002b:00007ffea09aed48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 353.898976][ T9665] RAX: 0000000000000000 RBX: 0000000000052bba RCX: 00007fc0b178f749 [ 353.906931][ T9665] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 353.914974][ T9665] RBP: 00007fc0b19e7da0 R08: 0000000000000001 R09: 00000003a09af03f [ 353.922933][ T9665] R10: 0000001b2c120000 R11: 0000000000000246 R12: 00007fc0b19e5fac [ 353.930888][ T9665] R13: 00007fc0b19e5fa0 R14: ffffffffffffffff R15: 00007ffea09aee60 [ 353.938853][ T9665] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 353.957056][ T5773] Bluetooth: hci0: command tx timeout [ 354.316340][ T3522] bond0 (unregistering): Released all slaves [ 354.339326][ T3522] bridge0 (unregistering): left allmulticast mode [ 354.413292][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 354.422446][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 354.435883][ T9653] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.444811][ T9653] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.453565][ T9653] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.462321][ T9653] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.886578][ T9653] syz_tun (unregistering): left allmulticast mode [ 354.941771][ T3522] IPVS: stop unused estimator thread 0... [ 355.096893][ T3522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.171689][ T3522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.248676][ T3522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.310681][ T3522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.380873][ T8] page_pool_release_retry() stalled pool shutdown 32 inflight 181 sec [ 355.451740][ T3522] tipc: Left network mode [ 356.221161][ T3522] hsr_slave_0: left promiscuous mode [ 356.237663][ T3522] hsr_slave_1: left promiscuous mode [ 356.243635][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.251431][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.260579][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.270439][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.280012][ T3522] bridge_slave_1: left allmulticast mode [ 356.285661][ T3522] bridge_slave_1: left promiscuous mode [ 356.292514][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.302438][ T3522] bridge_slave_0: left allmulticast mode [ 356.308101][ T3522] bridge_slave_0: left promiscuous mode [ 356.313896][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.324550][ T3522] veth1_macvtap: left promiscuous mode [ 356.330092][ T3522] veth0_macvtap: left promiscuous mode [ 356.335611][ T3522] veth1_vlan: left promiscuous mode [ 356.342239][ T3522] veth0_vlan: left promiscuous mode [ 356.420439][ T3522] team0 (unregistering): Port device geneve0 removed [ 356.528576][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 356.551152][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 356.579296][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.604049][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.876939][ T3522] bond0 (unregistering): Released all slaves [ 356.901017][ T3522] bridge0 (unregistering): left allmulticast mode [ 358.830534][ T3522] IPVS: stop unused estimator thread 0... [ 359.169040][ T3522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.180411][ T3522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.222104][ T3522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.232732][ T3522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.267881][ T3522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.279195][ T3522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.330769][ T3522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.341626][ T3522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.434315][ T3522] hsr_slave_0: left promiscuous mode [ 360.488708][ T3522] hsr_slave_1: left promiscuous mode [ 360.494674][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.512856][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.520835][ T3522] bridge_slave_1: left allmulticast mode [ 360.526502][ T3522] bridge_slave_1: left promiscuous mode [ 360.533534][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.545106][ T3522] bridge_slave_0: left allmulticast mode [ 360.550760][ T3522] bridge_slave_0: left promiscuous mode [ 360.557794][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.571807][ T3522] hsr_slave_0: left promiscuous mode [ 360.579447][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.587148][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.594915][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.606418][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.614121][ T3522] bridge_slave_1: left allmulticast mode [ 360.622836][ T3522] bridge_slave_1: left promiscuous mode [ 360.628690][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.637423][ T3522] bridge_slave_0: left allmulticast mode [ 360.644503][ T3522] bridge_slave_0: left promiscuous mode [ 360.650964][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.666142][ T3522] veth1_macvtap: left promiscuous mode [ 360.672346][ T3522] veth0_macvtap: left promiscuous mode [ 360.677944][ T3522] veth1_vlan: left promiscuous mode [ 360.684662][ T3522] veth0_vlan: left promiscuous mode [ 360.727485][ T3522] infiniband syz2: set down [ 360.843652][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 360.877329][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 360.900575][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.924409][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.977367][ T3522] bond0 (unregistering): Released all slaves [ 361.091322][ T42] smc: removing ib device syz2 [ 361.167676][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 361.195880][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 361.236219][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.262357][ T3522] bond0 (unregistering): (slave .): Releasing backup interface [ 361.341782][ T3522] bond0 (unregistering): Released all slaves [ 361.399766][ T5830] infiniband syz2: ib_query_port failed (-19)